Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
File: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft (raw, json)
Hash identifier: DEInd6GfgkV04WG4LECXCm99LyTB5dK1gDIQh0004+s=
Subject key identifier: 2E:4E:00:45:A0:28:1C:4A:C5:8E:34:02:4E:7A:0E:93:67:D1:E7:E8
Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
Certificate issuer: /CN=f879baa89e214133ccf6460f24206ad2c86670eb
Certificate serial: 019655007561970F3F106134526FB0F3396F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
Manifest number: 045D
Signing time: Sun 20 Apr 2025 21:00:15 +0000
Manifest this update: Sun 20 Apr 2025 21:00:15 +0000
Manifest next update: Mon 21 Apr 2025 21:00:15 +0000
Files and hashes: 1: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl (hash: Fqy9LKO7oYyGfIzTSXUFHMtH0bMgBAy+m82HvafjUDw=)
2: AuXo05ybv8icHHWqDyU8sDSnZ1Y.roa (hash: UxOR6qET+hxOD3wGEyopUX9auNkRzvxhrEq1sLIBOVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:75:61:97:0f:3f:10:61:34:52:6f:b0:f3:39:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb
Validity
Not Before: Apr 20 21:00:15 2025 GMT
Not After : Apr 21 21:00:15 2025 GMT
Subject: CN=2e4e0045a0281c4ac58e34024e7a0e9367d1e7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0b:d2:af:8f:31:b4:24:2a:ed:81:5f:95:ce:
ed:fe:51:b1:36:c6:b1:eb:e9:c2:77:65:aa:d9:ee:
7a:01:b0:f5:ee:fd:2b:b5:cf:31:86:a7:2f:5d:cf:
ee:ff:d9:4b:5a:90:e1:46:3d:7a:1f:55:87:eb:f5:
43:5a:c3:65:77:ce:0e:ef:45:3d:20:ab:d4:14:7b:
d7:4d:43:1c:a4:b9:83:17:ea:ee:01:7d:11:cb:94:
ae:47:c2:a4:9a:10:88:14:38:9e:45:f4:32:b0:02:
9f:7a:b1:1a:df:3a:3e:9f:2f:2d:d0:07:1f:c6:a3:
97:53:88:23:de:fc:d6:aa:c4:10:30:0d:2e:a6:d8:
9c:a5:05:5b:9a:f0:ca:61:92:49:ae:7b:be:6e:74:
cf:9b:a0:ef:1d:0b:d5:11:79:96:70:24:85:69:dd:
8f:1f:d2:8e:b4:e6:74:c8:62:68:11:ea:9f:50:a1:
e0:33:7a:ff:f1:ba:4f:dc:73:1f:4c:85:9d:a0:8e:
a1:d6:13:32:f0:d7:5f:03:db:be:f6:35:38:b7:0b:
16:64:65:f8:0b:2c:48:d3:e6:c5:e6:9d:fa:eb:93:
d0:51:e5:c2:b1:f4:6f:ca:a5:cb:b6:8e:fa:c5:bd:
e1:f9:9f:e0:1b:7d:88:d3:aa:31:4e:75:2c:63:2f:
59:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4E:00:45:A0:28:1C:4A:C5:8E:34:02:4E:7A:0E:93:67:D1:E7:E8
X509v3 Authority Key Identifier:
keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ad:52:e4:8d:3c:f5:41:50:a9:21:94:ab:cd:55:8b:b5:af:
91:4d:7e:f1:a1:ee:26:54:3c:9a:3f:53:31:91:bd:72:c3:f4:
5d:7b:11:ee:aa:98:49:d7:2c:21:2a:f5:d8:ab:ac:f2:43:7d:
78:6c:3d:1f:47:ba:f2:96:67:b8:bf:2c:d1:af:b7:bf:c4:ff:
da:64:32:4f:3e:05:d3:f6:38:73:5d:77:0a:2a:0c:f0:85:94:
f2:e0:7c:36:9c:01:90:59:c3:81:83:40:b1:f1:43:d2:57:56:
8d:a7:ab:b1:72:6d:6a:e4:f1:41:09:6b:f6:81:fe:7a:98:20:
2b:14:f3:a2:63:3a:86:3e:b0:ca:87:2f:68:48:42:2f:4a:ad:
ea:52:cc:20:c6:83:16:81:06:26:cd:94:78:4a:50:be:6f:67:
bb:7b:f7:45:24:ff:7a:a2:1e:54:3e:55:4f:9b:20:0a:ce:18:
eb:d6:24:d8:db:f7:99:17:2f:e0:94:6f:ea:12:33:b2:20:b4:
78:af:81:75:3d:5c:71:47:f5:01:2c:37:ea:63:f0:9f:cf:be:
52:d7:b3:39:4d:49:8a:53:54:1e:5f:b0:d9:c8:e5:bb:ee:22:
a9:9e:9c:c1:fb:0d:8f:60:fb:e2:49:ad:d7:f4:05:b4:b1:00:
1d:e9:46:6c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZVAHVhlw8/EGE0Um+w8zlvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NzliYWE4OWUyMTQxMzNjY2Y2NDYwZjI0MjA2YWQyYzg2
NjcwZWIwHhcNMjUwNDIwMjEwMDE1WhcNMjUwNDIxMjEwMDE1WjAzMTEwLwYDVQQD
EygyZTRlMDA0NWEwMjgxYzRhYzU4ZTM0MDI0ZTdhMGU5MzY3ZDFlN2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywvSr48xtCQq7YFflc7t/lGxNsax
6+nCd2Wq2e56AbD17v0rtc8xhqcvXc/u/9lLWpDhRj16H1WH6/VDWsNld84O70U9
IKvUFHvXTUMcpLmDF+ruAX0Ry5SuR8KkmhCIFDieRfQysAKferEa3zo+ny8t0Acf
xqOXU4gj3vzWqsQQMA0upticpQVbmvDKYZJJrnu+bnTPm6DvHQvVEXmWcCSFad2P
H9KOtOZ0yGJoEeqfUKHgM3r/8bpP3HMfTIWdoI6h1hMy8NdfA9u+9jU4twsWZGX4
CyxI0+bF5p3665PQUeXCsfRvyqXLto76xb3h+Z/gG32I06oxTnUsYy9Z8QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFC5OAEWgKBxKxY40Ak56DpNn0efoMB8GA1UdIwQY
MBaAFPh5uqieIUEzzPZGDyQgatLIZnDrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IbTZxSjRoUVRQTTlrWVBKQ0JxMHNobWNPcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvNGNlZmFiLTQ3NzUtNDI1OC1iOTcx
LTRmY2Y4NGM4NWI2My8xLzEtSG02cUo0aFFUUE05a1lQSkNCcTBzaG1jT3MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2E3LzRjZWZhYi00Nzc1LTQyNTgtYjk3MS00ZmNmODRjODVi
NjMvMS8xLUhtNnFKNGhRVFBNOWtZUEpDQnEwc2htY09zLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC61S
5I089UFQqSGUq81Vi7WvkU1+8aHuJlQ8mj9TMZG9csP0XXsR7qqYSdcsISr12Kus
8kN9eGw9H0e68pZnuL8s0a+3v8T/2mQyTz4F0/Y4c113CioM8IWU8uB8NpwBkFnD
gYNAsfFD0ldWjaersXJtauTxQQlr9oH+epggKxTzomM6hj6wyocvaEhCL0qt6lLM
IMaDFoEGJs2UeEpQvm9nu3v3RST/eqIeVD5VT5sgCs4Y69Yk2Nv3mRcv4JRv6hIz
siC0eK+BdT1ccUf1ASw36mPwn8++UtezOU1JilNUHl+w2cjlu+4iqZ6cwfsNj2D7
4kmt1/QFtLEAHelGbA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:08:50 2025 by rpki-client